PT-2023-6699 · Dmidecode+7 · Dmidecode+7

Publicado 2023-03-14 · Atualizado 2025-03-04 · CVE-2023-30630

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dmidecode versions prior to 3.5

Description The issue is related to insecure management of privileges in the Dmidecode utility of the Linux operating system. This allows an attacker to potentially elevate their privileges. The problem arises because Dmidecode's -dump-bin option can overwrite a local file, which has security implications, especially when Dmidecode is executed via Sudo.

Recommendations For versions prior to 3.5, update to version 3.5 or later to resolve the issue. As a temporary workaround, consider restricting the execution of Dmidecode via Sudo to minimize the risk of exploitation.

Exploit

Correção

Relative Path Traversal

Improper Privilege Management

Enumeração de Fraquezas

CWE-23

CWE-269

Identificadores relacionados

ALSA-2023:5061

ALSA-2023:5252

AZL-26138

BDU:2023-07470

CESA-2023_5252

CVE-2023-30630

ECHO-4A7C-5102-1F27

MGASA-2023-0180

OESA-2023-1264

RHSA-2023:5061

RHSA-2023:5252

RHSA-2023_5061

RHSA-2023_5252

RLSA-2023:5061

ROSA-SA-2023-2282

SUSE-SU-2023:1947-1

SUSE-SU-2023:2044-1

SUSE-SU-2023:2215-1

SUSE-SU-2023_1947-1

SUSE-SU-2023_2044-1

SUSE-SU-2023_2215-1

Produtos afetados

Almalinux

Centos

Debian

Dmidecode

Red Hat

Red Os

Rocky Linux

Suse

Referências · 55

• 🔥 https://github.com/adamreiser/dmiwrite · Exploit
• https://osv.dev/vulnerability/ALSA-2023:5061 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-30630 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-30630 · Nota
• https://errata.almalinux.org/8/ALSA-2023-5252.html · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-30630 · Aviso do Fabricante
• https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2023-5061.html · Aviso do Fabricante
• https://github.com/advisories/GHSA-9r2p-xmm5-5ppg · Nota
• https://bdu.fstec.ru/vul/2023-07470 · Nota de Segurança
• https://docs.bell-sw.com/security/cves/CVE-2023-30630 · Nota
• https://errata.rockylinux.org/RLSA-2023:5061 · Aviso do Fabricante
• https://bugzilla.suse.com/1210418 · Nota
• https://osv.dev/vulnerability/OESA-2023-1264 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-30630.html · Nota